Not able to mandate Mitigaition control in Approval Workflow

[Vamsi]

Hi All,

We have enabled sod for few groups and was trying to mandate mitigating control from the access approver . changes were made in the workflow "MC required for Risk" , but it was allowing approver to approve the group with out adding a mitigating control.  is there some other config that we are missing?  Screenshot of workflow attached

Show Sod , Show mitigating control enabled in Savrole

MC required for Risk  is set to Critical and High in the workflow.

[DaanishJawed]

Hi @Vamsi ,

Can you enable the below config and check ?

Navigate to Admin > Global Config > Request and Enable the below config.

Try it with above config and submit a new request to validate.

[Manu269]

@Vamsi This is a known issue.

We were able to achieve the same in SSM 3.x and 5.x version anyhow in version 2020.x seems this is broken.

We raised FD with Saviynt Engineer and follwoing were the response from Engineering :

Action:  Yes, it is not supported in V2021 for any type, if the configuration is enabled for Low, Medium, High and Critical types of risk for any approval (Manager, Managers Manager, Access Approval, Custom Assignment, Resource Owner, SOD Owner Approval) then Approvers are able to approve the request which has violations but mitigating controls can't be made as mandatory as of now.

[Vamsi]

@Manu269  Thanks, yes we got the same response but this seem like a bad design decision hope they fix it in upcoming release .